3

I was running a test using WireShark to torch some traffic. I saw quite a bit of traffic on localhost. Further investigation showed the following issue:

I am seeing a HTTP GET request about every second that requests a JPEG called areYouAlive:

WireShark Get Request

Transmission Control Protocol, Src Port: 61239, Dst Port: 50063, Seq: 1, Ack: 1, Len: 165
GET /areYouAlive HTTP/1.1\r\n
[Expert Info (Chat/Sequence): GET /areYouAlive HTTP/1.1\r\n]
        [GET /areYouAlive HTTP/1.1\r\n]
        [Severity level: Chat]
        [Group: Sequence]
    Request Method: GET
    Request URI: /areYouAlive
    Request Version: HTTP/1.1

Reviewing netstat and showing PID for the connection showed Process ID 0 which maps to System Idle Process.

I used WireShark to extract the image and it is a very tiny image that is 631 bytes. A very tiny pixel. I will attach it here as well.

areYouAlive JPG file

Does anyone have any idea what is causing this? I have never seen it before, but I have also never looked.

Danny
  • 33

1 Answers1

4

I'm about 2 years late to this but just researched the same issue on my system and found the culprit.

It is the ScreenPal (formerly ScreenCast-O-Mastic) software that I've been using to record screen and audio.

Kill the auto-startup for it and it will stop.

Giacomo1968
  • 58,727
JunkYard
  • 56